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i-esearch  and  throufi'ii  the  promotion  of  im])rovements  in  clinical  practice 
and  in  the  orfianization,  financing-,  and  deliveiy  of  health  care  senices. 


Mr.  Ryan  of  Wisconsin  introduced  the  folhming-  bill;  which  was  referred  to 
the  Committee  on  EnerfjT  and  Commerce,  and  in  addition  to  the  Com- 
mittee on  Ways  and  Means,  for  a  i)eriod  to  be  subsequently  determined 
by  the  Si)eaker,  in  each  case  for  consideration  of  such  prcnisions  as  fall 
■\\itliin  the  jurisdiction  of  the  committee  concerned 


To  establish  a  Health  Care  Services  Commission  to  enhance 
the  quality,  ai)propriateness,  and  effectiveness  of  health 
care  services,  and  access  to  such  semces,  through  the 
establishment  of  a  broad  base  of  scientific  research  and 
through  the  promotion  of  improvements  in  clinical  prac- 
tice and  in  the  organization,  financing,  and  deliveiy  of 
health  care  sei'vices. 


IN  THE  HOUSE  OF  REPRESENTATIVES 


September  24,  2008 


BILL 


1  Be  it  enacted  hy  the  Senate  and  House  of  Representa- 

2  tives  of  the  United  States  of  America  in  Congress  assembled, 
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1  TITLE  I— ESTABLISHMENT  AND 

2  GENERAL  DUTIES 

3  SEC.  101.  ESTABLISHMENT. 

4  (a)  In  Gener^vl. — There  is  hereby  estabhshed  a 

5  Health  Care  Sendees  Commission  (in  this  Aet,  referred 

6  to  as  the  "Commission")  to  be  composed  of  five  commis- 

7  sioners  (in  this  Aet  referred  to  as  the  "Connnissioners") 

8  to  be  aj^pointed  by  the  President  hy  and  with  the  ad\iee 

9  and  consent  of  the  Senate.  Not  more  than  three  of  such 

10  commissioners  shall  be  members  of  the  same  political 

1 1  party,  and  in  making  a])i)ointments  members  of  different 

12  political  parties  shall  be  a])i)ointed  alternately  as  nearl.y 

13  as  may  be  practicable.  No  commissioner  shall  engage  in 

14  any  other  business,  vocation,  or  emplo^inent  than  that  of 

15  serving  as  commissioner.  Each  commissioner  shall  hold  of- 

16  fice  for  a  term  of  five  years  and  until  his  successor  is  ap- 

17  ijointed  and  has  qualified,  except  that  he  shall  not  so  con- 

18  tinue  to  sen^e  beyond  the  exjoiration  of  the  next  session 

19  of  Congi-ess  subsequent  to  the  ex}:)iration  of  said  fixed 

20  term  of  office,  and  excejit  ( 1 )  any  commissioner  appointed 

21  to  fill  a  vacancy  occuri-ing  prior  to  the  ex])ii-ation  of  the 

22  term  for  which  his  i)redecessor  was  apjDointed  shall  be  ap- 

23  pointed  for  the  remainder  of  such  term,  and  (2)  the  terms 

24  of  office  of  the  commissioners  first  taking  office  after  the 

25  enactment  of  this  Act  shall  ex^jire  as  designated  by  the 
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1  President  at  the  time  of  iioniiiiation,  one  at  the  end  of 

2  one  year,  one  at  the  end  of  two  years,  one  at  the  end  of 

3  three  years,  one  at  the  end  of  four  years,  and  one  at  the 

4  end  of  five  years,  after  the  date  of  the  enactment  of  this 

5  Act. 

6  (b)  Purpose. — The  purpose  of  the  Commission  is  to 

7  enhance  the  quahty,  appropriateness,  and  effectiveness  of 

8  health  care  semces,  and  access  to  such  services,  through 

9  the  estabhshment  of  a  broad  base  of  scientific  research 

10  and  through  tlie  promotion  of  improvements  in  chnical 

1 1  practice  and  in  the  organization,  financing,  and  dehveiy 

12  of  health  care  services. 

13  (c)  Ai'POiNTMENT  OF  CiiAiRMAN. — The  President 

14  shall,  from  among  the  Commissioners  appointed  under 

15  subsection  (a),  designate  an  indi\idual  to  serve  as  the 

16  Chairman  of  the  Commission. 

17  SEC.  102.  GENERAL  AUTHORITIES  AND  DUTIES. 

18  (a)  In  GENEiiAi.. — In  can^dng  out  section  101(b), 

19  the  Commissioners  shall  conduct  and  sui)i)ort  research, 

20  demonstration  projects,  evaluations,  training,  guideline  de- 

21  velopment,  and  the  dissemination  of  information,  on 

22  liealth  care  sendees  and  on  systems  for  the  deliveiy  of 

23  such  semces,  including  activities  with  respect  to — 

24  (1)  the  effectiveness,  efficiency,  and  quality  of 

25  health  care  sei'vices; 
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1  (2)  the  outcomes  of  health  care  sei^ces  and 

2  i)roeedvires; 

3  (3)  ehiiical  practice,  iiiehiding;  primary  care  and 

4  i)ractice-oriented  research; 

5  (4)    heahh   care   technologies,   facilities,  and 

6  equipment; 

7  (5)  health  care  costs,  productixity,  and  market 

8  forces; 

9  (6)  health  promotion  and  disease  prevention; 

10  (7)  health  statistics  and  epidemiologv';  and 

11  (8)  medical  liability. 

12  (b)  Requirements  With  Respect  to  Ruiul 


13  AiiEAS  AND  Undersekveu  POPULATIONS. — In  carmng 

14  out  subsection  (a),  the  Commissioners  shall  undertake  and 

15  support  research,  demonstration  projects,  and  evaluations 

1 6  with  respect  to — 


17  (1)  the  deliveiy  of  health  care  sei-vices  in  rural 

1 8  areas  (including-  fi-ontier  areas) ;  and 

19  (2)  the  health  of  low-income  gi'oups,  minority 

20  groups,  and  the  elderly. 

21  SEC.  103.  DISSEMINATION. 

22  (a)  In  Genei^uM^. — The  Commissioners  shall — 

23  (1)  promptly  publish,  make  available,  and  oth- 

24  ei-wdse  dissemhiate,  in  a  form  understandable  and  on 

25  as  broad  a  basis  as  practicable  so  as  to  maximize  its 
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1  use,  the  results  of  research,  demonstration  projects, 

2  and  evahiations  conducted  or  supported  under  this 

3  Act  and  the  criiidehnes,  standards,  and  review  cri- 

4  teria  developed  under  this  Act; 

5  (2)  pi-omptly  make  a\'ailahle  to  the  public  data 

6  develojjed  in  such  research,  demonstration  projects, 

7  and  evaluations;  and 

8  (3)  as  ap])roi)riate,  provide  technical  assistance 

9  to  State  and  local  government  and  health  agencies 

10  and  conduct  liaison  activities  to  such  agencies  to  fos- 

1 1  ter  dissemination. 

12  (b)  Prohibition  Against  Restrictions. — Except 

13  as  provided  in  subsection  (c),  the  Connnissioners  may  not 

14  restrict  the  publication  or  dissemination  of  data  from,  or 

15  the  results  of,  projects  conducted  or  supported  under  this 

16  Act. 

17  (c)  Limitation  on  Use  of  Certmn  Inp^orma- 

18  TION. — No  hiformation,  if  an  establishment  or  person  sup- 

19  plying  the  information  or  desci-ibed  in  it  is  identifiable, 

20  obtained  in  the  course  of  activities  undertaken  or  sup- 

21  ported  under  this  Act  may  be  used  for  any  purijose  other 

22  than  the  purpose  for  which  it  was  supplied  unless  such 

23  establishment  or  person  has  consented  (as  determined 

24  under  re^ilations  of  the  Secretaiy)  to  its  use  for  such 

25  other  purpose.  Such  information  may  not  be  published  or 
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1  released  in  other  form  if  the  person  who  su]3])he(l  the  infor- 

2  mation  or  who  is  descrihed  in  it  is  identifiable  unless  such 

3  i)erson  has  consented  (as  determined  under  re^ilations  of 

4  the  Secretaiy)  to  its  publication  or  release  in  other  form. 

5  (d)    Certain    Interagency   A(iREEMBNT. — The 

6  Commissioners  and  the  Director  of  the  National  Libraiy 

7  of  Medicine  shall  enter  into  an  agreement  pro\dding  for 

8  the  implementation  of  subsection  (a)(1). 

9  TITLE  II— FORUM  FOR  QUALITY 

10  AND  EFFECTIVENESS  IN 

11  HEALTH  CARE 

12  SEC.  201.  ESTABLISHMENT  OF  OFFICE. 

13  There  is  established  A^ithin  the  Commission  an  office 

14  to  be  knoAMi  as  the  Office  of  the  Forum  for  Quality  and 

15  Effectiveness  in  Health  Care.  The  office  shall  be  headed 

16  by  a  director  (referred  to  in  this  Act  as  the  "Director") 

17  who  shall  be  appointed  by  the  Commissioners. 

1 8  SEC.  202.  MEMBERSHIP. 

19  (a)  In  GENERiU.. — The  Office  of  the  Fonmi  for  Qual- 

20  ity  and  Effectiveness  in  Health  Care  shall  be  composed 

21  of  15  indi\iduals  nominated  by  private  sector  health  care 

22  organizations  and  appointed  by  the  Commission  and  shall 

23  include  representation  from  at  least  the  folloA\ing;: 

24  (1)  Health  insurance  industrj^ 

25  (2)  Health  care  provider  gi'ou])S. 
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1  (3)  Non-profit  organizations. 

2  (4)  Rural  health  organizations. 

3  (b)  Terims.— 

4  (1)  In  GENEiiAJj. — Except  as  pro^dded  in  para- 

5  gi^aph  (2),  members  of  the  Office  of  the  Forum  for 

6  Quality  and  Effectiveness  in  Health  Care  shall  serve 

7  for  a  term  of  5  years. 

8  (2)  STA(«iERED  ROTATION. — Of  the  members 

9  first  appointed  to  the  Office  of  the  Forum  foi*  Qual- 

10  ity  and  Effectiveness  in  Health  Care,  the  Commis- 

11  sion  shall  a])i)oint  5  members  to  sen^e  for  a  term  of 

12  2  years,  5  members  to  sen^e  for  a  term  of  3  years, 

13  and  5  members  to  sen^e  for  a  term  of  4  yeai's. 

14  (c)  Treatment  of  Other  Employment. — Each 

15  member  of  the  Office  of  the  Forum  for  Quality  and  Effec- 

16  tiveness  in  Health  Care  shall  sen^e  the  Office  independ- 

17  ently  from  any  other  position  of  employment. 

1 8  SEC.  203.  DUTIES. 

19  (a)    ESTiVBLISIIMENT   OF   FORUM   PROGimi. — The 

20  Commissioners,  acting  through  the  Director,  shall  estab- 

21  lish  a  program  to  be  known  as  the  Forum  for  Quality  and 

22  Effectiveness  in  Health  Care.  For  the  purpose  of  pro- 

23  moting  transparency  in  price,  quality,  appropriateness, 

24  and  effectiveness  of  health  care,  the  Director,  using  the 

25  iirocess  set  forth  in  section  204,  shall  arrange  for  the  de- 
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1  velopment  and  periodic  review  and  ui)dating-  of  standards 

2  of  quality,  ])erfornianee  measures,  and  medical  re^^ew  cri- 

3  teria  through  which  health  care  pro\dders  and  other  appro- 

4  priate  entities  may  assess  or  re^^ew  the  pro^^sion  of  health 

5  care  and  assure  the  quality  of  such  care. 

6  (b)  Certain  Requirements. — Guidelines,  stand- 

7  ards,  performance  measures,  and  re\iew  criteria  under 

8  subsection  (a)  shall — 

9  (1)  be  based  on  the  best  available  research  and 

10  professional  judgment  regarding  the  effectiveness 

1 1  and  ap])ro])riateness  of  health  care  sendees  and  pro- 

12  cedures;  and 

13  (2)  be  presented  in  foi'mats  appropriate  for  use 

14  by  physicians,  health  care  practitioners,  pro^^ders, 

15  medical  educators,  and  medical  re\dew  organizations 

16  and  in  formats  ap]:)ropriate  for  use  by  consumers  of 

17  health  care. 

18  (c)  Authority  for  Contracts. — In  carrying  out 

19  this  title,  the  Director  may  enter  into  contracts  with  public 

20  or  nonprofit  private  entities. 

21  (d)  Public  Disclosure  of  Recommendations. — 

22  For  each  fiscal  year  begimiing  with  2010,  the  Director 

23  shall  make  i^ublicly  available  the  follo\\dng: 

24  (1)  quarterly  reports  for  public  comment  that 

25  include  proposed  recommendations  for  guidelines. 
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1  standards,  performance  measures,  and  review  cri- 

2  teria  under  subsection  (a)  and  any  updates  to  such 

3  guidelines,  standards,  performance  measures,  and 

4  review  criteria;  and 

5  (2)  after  consideration  of  such  comments,  a 

6  final  report  that  contains  final  recommendations  for 

7  such  guidelines,  standards,  performance  measures, 

8  review  criteria,  and  updates. 

9  (e)  Date  Certain  for  Initlvl  Guidelines  and 

10  Standards. — The  Commissioners,  by  not  later  than  Jan- 

11  nary  1,  2012,  shall  assure  the  development  of  an  hiitial 

12  set  of  guidelines,  standards,  performance  measures,  and 

13  re\dew  criteria  under  subsection  (a). 

14  SEC.  204.  ADOPTION  AND  ENFORCEMENT  OF  GUIDELINES 

15  AND  STANDARDS. 

16  (a)  Adoption  of  Recommendations  of  Forum 

17  for  Quai^ity  and  Effectr^ness  in  Health  Care. — 

18  For  each  fiscal  year,  the  Commissioners  shall  adopt  the 

19  recommendations  made  for  such  year  in  the  final  report 

20  under  subsection  (d)(2)  of  section  203  for  guidelines, 

21  standards,  performance  measures,  and  re\aew  criteria  de- 

22  scribed  in  subsection  (a)  of  such  section. 

23  (b)    Enforcement   Authority. — The  Commis- 

24  sioners,  in  consultation  with  the  Secretaiy  of  Health  and 

25  Human  Senices,  have  the  authority  to  make  recommenda- 
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1  tioiis  to  the  Secretary  to  enforce  eom])liance  of  health  care 

2  pro\aders  \\ith  the  guidehnes,  standards,  performance 

3  measures,  and  re\aew  criteria  ado])ted  under  subsection 

4  (a).  Such  reconnnendations  may  include  the  follo^^^ng•, 

5  with  respect  to  a  health  care  pro\ider  who  is  not  in  compli- 

6  ance  with  such  guidelines,  standards,  measures,  and  cri- 

7  teria: 

8  (1)  Exclusion  from  participation  in  Federal 

9  health    care    progi'ams    (as    defined    in  section 

10  1128B(f)  of  the  Social  Security  Act  (42  U.S.C. 

11  1320a-7b(f))). 

12  (2)  Imposition  of  a  ci\'il  money  penalty  on  such 

13  i)ro\dder. 

14  SEC.  205.  ADDITIONAL  REQUIREMENTS. 

15  (a)  Pkogii^vm  Agenda. — The  Commissioners  shall 

16  provide  for  an  agenda  for  the  develoijment  of  the  guide- 

17  lines,  standards,  performance  measures,  and  review  cri- 

18  teria  described  in  section  203(a),  including  with  respect 

19  to  the  standards,  performance  measures,  and  review  cri- 

20  teria,  identifyuig  specific  aspects  of  health  care  for  which 

21  the  standards,  performance  measures,  and  review  criteria 

22  are  to  be  develojied  and  those  that  are  to  be  given  ])riority 

23  in  the  development  of  the  standards,  performance  meas- 

24  ures,  and  re\iew  criteria. 
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1  TITLE  III— GENERAL 

2  PROVISIONS 

3  SEC.  301.  CERTAIN  ADMINISTRATIVE  AUTHORITIES. 

4  The  Commissioners,  in  carndng  out  this  Act,  may  ac- 

5  cept  vohmtai^i'  and  uncorai)ensated  sei"vices. 

6  SEC.  302,  FUNDING. 

7  For  the  purpose  of  carrying  out  this  Act,  there  are 

8  authorized  to  be  appropriated  such  sums  as  may  be  nec- 

9  essary  for  fiscal  years  2010  through  2014. 

10  SEC.  303.  DEFINITIONS. 

1 1  For  purposes  of  this  Act: 

12  (1)  The  term  "Commissioners"  means  the  Com- 

13  missioners  of  the  Heahh  Care  Sendees  Commission. 

14  (2)  The  term  "Commission"  means  the  Health 

15  Care  Sendees  Commission. 

16  (3)  The  term  "Director"  means  the  Director  of 

17  the  Office  of  the  Forum  for  Quality  and  Effeetive- 

18  ness  in  Health  Care. 

19  (4)  The  term  "Secretarv^"  means  the  Secretaiy 

20  of  Health  and  Human  Sendees. 
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1  TITLE  IV— TERMINATIONS  AND 

2  TRANSITION 

3  SEC.  401.  TERMINATION  OF  AGENCY  FOR  HEALTHCARE  RE- 

4  SEARCH  AND  QUALITY. 

5  As  of  the  date  of  the  enactment  of  this  Act,  the  Agen- 

6  ey  for  Healthcare  Research  and  Quality  is  terminated,  and 

7  title  IX  of  the  Public  Health  Senice  Act  is  repealed. 

8  SEC.  402.  TRANSITION. 

9  All  orders,  gi-ants,  contracts,  pri\dleges,  and  other  de- 

10  terminations  or  actions  of  the  Agency  for  Healthcare  Re- 

1 1  search  and  Quality  that  are  effective  as  of  the  date  before 

1 2  the  date  of  the  enactment  of  this  Act,  shall  be  transferred 

13  to  the  Secretaiy  and  shall  continue  in  effect  according  to 

14  their  terms  unless  changed  jmi-suant  to  law. 

15  TITLE  V— INDEPENDENT 

16  HEALTH  RECORD  TRUST 

1 7  SEC.  501.  TITLE  V  SHORT  TITLE. 

18  This  title  may  be  cited  as  the  "Independent  Health 

19  Record  Trust  Act  of  2008". 

20  SEC.  502.  PURPOSE. 

21  It  is  the  i)urpose  of  this  title  to  i)ro\ide  for  the  estab- 

22  lishment  of  a  natiouAnde  health  information  technology 

23  network  that — 

24  (1)  ini]) roves  health  care  quality,  reduces  med- 

25  ical  errors,  increases  the  efficiency  of  care,  and  ad- 
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1  vances  the  deliverv^  of  appropriate,  eAidence-based 

2  health  care  services; 

3  (2)  promotes  wehness,  disease  prevention,  and 

4  the  management  of  chronic  ilhiesses  by  increasing 

5  the  availabihty  and  transparency  of  information  re- 

6  lated  to  the  health  care  needs  of  an  indi\'idual; 

7  (3)  ensnres  that  appropriate  information  nec- 

8  essars'^  to  make  medical  decisions  is  available  in  a  us- 

9  able  form  at  the  time  and  in  the  location  that  the 

10  medical  semce  involved  is  pro\ided; 

11  (4)  jH-oduces  greater  valne  for  health  care  ex- 

12  penditures  by  reducing  health  care  costs  that  result 

13  from  inefficiency,  medical  errors,  inappropriate  care, 

14  and  incomplete  information; 

15  (5)  promotes  a  more  effective  marketplace, 

16  greater  competition,  gi-eater  s^ystems  analysis,  in- 

17  creased  choice,  enhanced  quality,  and  improved  out- 

18  comes  in  health  care  senices; 

19  (6)  improves  the  coordination  of  information 

20  and  the  l)ro^^sion  of  such  sendees  through  an  effec- 

21  five  infrastructure  for  the  secure  and  authorized  ex- 

22  change  and  use  of  health  information;  and 

23  (7)  ensures  that  the  health  information  privacy, 

24  security,  and  confidentiality  of  indi\ddually  identifi- 

25  able  health  information  is  protected. 
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1    SEC.  503.  DEFINITIONS. 


2  In  this  title: 

3  (1)  Access. — The  term  "access"  means,  Avith 

4  respect  to  an  electronic  health  record,  entering  infor- 

5  mation  into  such  account  as  well  as  retrieving  infor- 

6  mation  fi'om  such  account. 

7  (2)  Account. — The  tei-m  "account"  means  an 

8  electronic  health  record  of  an  individual  contained  in 

9  an  inde])endent  health  record  trust. 

10  (3)  iVj^i^iRMATiVE  CONSENT. — The  term  "af- 

11  firmative  consent"  means,  with  respect  to  an  elec- 

12  tronic  health  record  of  an  individual  contained  in  an 

13  IIIRT,  exi:)ress  consent  given  by  the  individual  for 

14  the  use  of  such  record  in  response  to  a  clear  and 

15  conspicuous  request  for  such  consent  or  at  the  indi- 

16  vidual's  ovmi  initiative. 

17  (4)  Authorized  eiir  data  user. — The  term 

18  "authorized  EIIR  data  user"  means,  with  resjiect  to 

19  an  electronic  health  record  of  an  IIIRT  participant 

20  contained  as  part  of  an  IIIRT,  any  entity  (othei- 

21  than  the  partici])ant)  authorized  (in  the  form  of  af- 

22  firmative  consent)  by  the  participant  to  access  the 

23  electronic  health  record. 

24  (5)  Confidentiality. — The  term  "confiden- 

25  tiality"  means,  v\ith  respect  to  individually  identifi- 

26  able  health  information  of  an  individual,  the  obliga- 
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1  tion  of  those  who  recei^-e  such  information  to  respect 

2  tlie  health  information  privacy  of  the  indi\idual. 

3  (6)  Electronic  health  record. — The  term 

4  "electronic  health  record"  means  a  longitudhial  col- 

5  lection  of  information  concerning;  a  single  indi^^dual, 

6  including  medical  records  and  personal  health  uifor- 

7  mation,  that  is  stored  electronically. 

8  (7)    Health    iNFORi\LmoN    privacy. — The 

9  term  "health  information  jirivacy"  means,  with  re- 

10  s])ect  to  individually  identifiable  health  information 

11  of  an  indi\idual,  the  right  of  such  indi^^dual  to  con- 

12  trol  the  acquisition,  uses,  or  disclosures  of  such  in- 

13  formation. 

14  (8)  Health  plan. — The  term  "health  plan" 

15  means  a  group  health  i)lan  (as  defined  in  section 

16  2208(1)  of  the  Public  Health  Sendee  Act  (42  U.S.C. 

17  300bb-8(l)))  as  well  as  a  i)lan  that  offers  health  ui- 

18  surance  coverage  in  the  indi\'idual  market. 

19  (9)  HIPAA  PRWACY  REGULATIONS. — The  term 

20  "HIPAA  jjrivacy  regulations"  means  the  regulations 

21  promulgated  undei-  section  264(c)  of  the  Health  In- 

22  surance  Portal)ility  and  Accountability  Act  of  1996 

23  (42  U.S.C.  1320d-2  note). 

24  (10)  Independent  health  record  trust; 

25  IIIRT. — The  terms  "independent  health  record  trust" 
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1  and  "IIIRT"  mean  a  legal  arrangement  under  the 

2  administration  of  an  IHRT  ojierator  that  meets  the 

3  requirements  of  this  title  with  resi)eet  to  electronic 

4  health  records  of  indi^^duals  i)ai"ticii)ating  in  the 

5  trust  or  IHRT. 

6  (11)  IIIRT  OPERATOR.— The  term  "IIIRT  op- 

7  erator"  means,  with  respect  to  an  IHRT,  the  organi- 

8  zation  that  is  responsible  for  the  administration  and 

9  operation  of  the  IIIRT  in  accordance  with  this  title. 

10  (12)  IHRT  PARTICIPANT.— The  term  "IIIRT 

11  participant"  means,  with  res]iect  to  an  IIIRT,  an  in- 

12  di\idual  wiio  has  a  ])artici])ation  agreement  in  effect 

13  with  respect  to  the  maintenance  of  the  indi^i(lua^s 

14  electronic  health  record  by  the  IHRT. 

15  (13)  Individually  idextiflvble  iiEiVi/ni  in- 

16  FORMATION. — The   term    "indi\idually  identifiable 

17  health  information"  has  the  meaning  given  such 

18  term  in  section  1171(6)  of  the  Social  Security  Act 

19  (42  U.S.C.  1320d(6)). 

20  (14)  Security. — The  term  "security"  means, 

21  with  respect  to  indi^idually  identifiable  health  infor- 

22  mation  of  an  individual,  the  physical,  technological, 

23  or  administrative  safeguards  or  tools  used  to  protect 

24  such  information  from  unwarranted  access  or  disclo- 

25  sure. 
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1  SEC.  504.  ESTABLISHMENT,  CERTIFICATION,  AND  MEMBER- 

2  SHIP   OF   INDEPENDENT   HEALTH  RECORD 

3  TRUSTS. 

4  (a)  Establishment. — Not  later  than  one  year  after 

5  the  date  of  the  enactment  of  this  Act,  tlie  Federal  Trade 

6  Commission,  in  consultation  with  the  National  Committee 

7  on  Vital  and  Health  Statistics,  shall  j^rescribe  standards 

8  for  the  establishment,  certification,  operation,  and  inter- 

9  operability  of  IIIRTs  to  cany  out  the  j)ur])oses  described 

10  in  section  502  in  accordance  with  the  pro\isions  of  this 

11  title. 


12  (b)  Certification. — 

13  (1)   Certification   by   ftc. — The  Federal 

14  Trade  Commission  shall  pnnide  for  the  certification 

15  of  IHRTs.  No  IHRT  may  be  certified  unless  the 

16  IHRT  is  determined  to  meet  the  standards  for  eer- 

17  tification  established  under  subsection  (a). 

18  (2)    De(^ertificati()N. — The   Federal  Trade 

19  Commission  shall  establish  a  i)rocess  for  the  revoca- 

20  tion  of  certification  of  an  IHRT  under  this  section 

21  in  the  case  that  the  IHRT  \iolates  the  standards  es- 

22  tablished  under  subsection  (a). 

23  (c)  Membership. — 

24  (1)  In  geneiul. — To  be  eligible  to  be  a  partic- 

25  ipant  in  an  IHRT,  an  indi\idual  shall — 
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1  (A)  siil)mit  to  the  IHRT  information  as  re- 

2  (luirod  by  the  IHRT  to  establish  an  electronic 

3  health  record  \w\th  the  IHRT;  and 

4  (B)  enter  into  a  privacy  j^rotection  agi'ee- 

5  ment  described  in  section  50()(b)(l)  \\ith  tlie 

6  IHRT. 

7  The  process  to  determine  eligibility  of  an  individual 

8  under  this  subsection  shall  allow  for  the  establish- 

9  ment  by  such  indi\ndual  of  an  electronic  health 

10  record  as  ex])editiously  as  possible  if  such  individual 

1 1  is  determined  so  eligible. 

12  (2)  No  LIMITATION  ON  MEMBERSHIP. — Notlhng 

13  in  this  subsection  shall  be  construed  to  ])ermit  an 

14  IHRT  to  restrict  membershi]),  including  on  the  basis 

15  of  health  c()nditi(m. 

1 6  SEC.  505.  DUTIES  OF  IHRT  TO  IHRT  PARTICIPANTS. 

17  (a)  Fiduciary  Duty  of  IHRT;  Penai/hes  for 

18  YlOI^TIONS  OF  FlDUCLUlY  DUTY. — 

19  (1)  FiDUCLViiY  DUTY. — With  respect  to  the 

20  electronic  health  recoi'd  of  an  IHRT  particii)ant 

21  maintained  by  an  IHRT,  the  IHRT  shall  have  a  fi- 

22  duciaiy  duty  to  act  for  the  benefit  and  in  the  inter- 

23  ests  of  such  ])articii)ant  and  of  the  IHRT  as  a  whole. 

24  Such  duty  shall  include  obtaining  the  affirmative 

25  consent  of  such  particijDant  j^rior  to  the  release  of  in- 
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1  formation   in  such  participant's  electronic  health 

2  record  in  accordance  with  the  requirements  of  this 

3  title. 

4  (2)  Penaltip]8. — If  the  IHRT  knowingly  or 

5  recklessly  breaches  the  fidiiciaiy  duty  described  in 

6  paragraph  (1),  the  IHRT  shall  be  subject  to  the  fbl- 

7  lowing  penalties: 

8  (A)  Loss  of  certification  of  the  IHRT. 

9  (B)  A  fine  that  is  not  in  excess  of  $50,000. 

10  (C)  A  term  of  imprisonment  for  the  indi- 

11  ^iduals  involved  of  not  more  than  5  yeai's. 

12  (b)  Electkonk'  HeaIjTH  Record  Deemed  To  Be 


13  Held  in  Trust  by  IHRT. — With  resi)ect  to  an  hidi- 

14  ^idual,  an  electnmic  health  record  maintained  by  an  IHRT 

15  shall  be  deemed  to  be  held  in  trust  by  the  IHRT  for  the 

16  benefit  of  the  indi\idual  and  the  IHRT  shall  have  no  legal 

17  01-  equitable  interest  in  such  electronic  health  record. 

1  8  SEC.  506.  AVAILABILITY  AND  USE  OF  INFORMATION  FROM 


19  RECORDS  IN  IHRT  CONSISTENT  WITH  PRI- 

20  VACY  PROTECTIONS  AND  AGREEMENTS. 

21  (a)  Protected  Electronic  Heai.tii  Records 

22  Use  and  Access. — 

23  (1)  General  rights  regarding  uses  of  in- 

24  foralvtion. — 
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1  (A)  In  (}ENEK.\l. — ^\Vith  respect  to  the 

2  eleetroiiie  health  record  of  an  IIIRT  particii)ant 

3  maintained  by  an  IHRT,  subject  to  ]>araoTa])h 

4  (2)(C),  i)riniary  uses  and  secondaiy  uses  (de- 

5  scribed  in  subpara^'aphs  (B)  and  (C),  respec- 

6  tively)  of  information  ^^^thin  such  record  (other 

7  than  by  such  participant)  shall  be  j^ermitted 

8  only  u])on  the  authorization  of  such  use,  prior 

9  to  such  use,  by  such  particij^ant. 

10  (B)  Pkijlvky  uses. — For  pui^joses  of  sub- 

1 1  paraorai^h  (A)  and  with  respect  to  an  electronic 

12  health  record  of  an  indi^^dual,  a  ])rimary  use  is 

13  a  use  for  jmrposes  of  the  indi^^{lua^s  self-care 

14  or  care  by  health  care  professionals. 

15  (C)  Secondary  uses. — For  ])ur])oses  of 

16  subparagTajih  (B)  and  with  res])ect  to  an  elec- 

17  tronic  health  record  of  an  in(li^idual,  a  sec- 

1 8  ondarv'  use  is  any  use  not  described  in  subpara- 

19  gTa])h  (B)  and  includes  a  use  for  i)uri:>oses  of 

20  i^ublic  health  research  or  other  related  acti\i- 

21  ties.  Additional  authorization  is  required  for  a 

22  secondary  use  extending  beyond  the  original 

23  i)ur])ose  of  the  secondary  use  authorized  by  the 

24  IHRT  partici])ant  involved.   Nothing  in  this 

25  paragraph  shall  be  eonstined  as  requiring  au- 
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1  thorization  for  oveiy  seeondaiy  use  that  is  A\ith- 

2  in  the  authorized  ori^nal  inupose. 

3  (2)  Rules  for  primary  use  op  records  for 

4  IIE^\l.TH  CARE  purposes. — ^W'ith  respect  to  the  elee- 

5  tronie  health  record  of  an  IHRT  participant  (or 

6  specified  ])arts  of  such  electronic  health  record) 

7  maintained  by  an  IHRT  standards  for  access  to 

8  such  record  shall  pro^^de  for  the  follomng: 

9  (A)  Access  by  iiirt  participants  to 

10  their  electronic  health  records. — 

11  (i)     Ownership. — The  i)articipant 

12  maintains  owiership  over  the  entire  elee- 

13  tronie  health  record  (and  all  portions  of 

14  such  record)  and  shall  have  the  right  to 

15  electronically  access  and  ixniew  the  con- 

16  tents  of  the  entire  record  (and  any  portion 

17  of  such  record)  at  any  time,  in  accordance 

18  ^^^th  this  subiiaragi^ajih. 

19  (ii)  Addition  of  personai.  infor- 

20  MATION. — The  ])articipant  may  add  per- 

21  sonal   health   information   to   the  health 

22  record  of  that  particijiant,  exce])t  that  such 

23  participant  shall  not  alter  information  that 

24  is  entered  into  the  electronic  health  record 

25  by  any  authorized  EHR  data  user.  Such 
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1  ])artieipant  shall  have  the  right  to  ])i'oi)ose 

2  an  aiiieiidnieiit  to  iiiforinatioii  that  is  eii- 

3  tared  by  an  authorized  EHR  data  user 

4  i)ursuant  to  standards  prescribed  by  the 

5  Federal  Trade  Commission  for  purposes  of 

6  amending'  sueli  information. 

7  (iii)  Identification  of  infori\l\- 

8  TION  ENTERED  HY  PARTICIPANT. — ^Auy  ad- 

9  ditions  or  amendments  made  by  the  partie- 

10  i])ant  to  the  health  i-ecord  shall  be  identi- 

11  fied  and  disclosed  A\ithin  such  record  as 

12  being  made  by  such  particii)ant. 

13  (B)  Access  by  entities  other  til\n 

14  IIIRT  PARTICIPANT. — 

15  (i)  Authorized  access  only. — Ex- 

16  cept  as  provided  under  sub])aragTai)h  (C) 

17  and  i)aragi'ai)h  (4),  access  to  the  electronic 

18  health    record    (or   any   portion    of  the 

19  record) — 

20  (I)  may  be  made  only  by  author- 

21  ized  EHR  data  users  and  only  to  such 

22  ]3ortions  of  the  record  as  specified  by 

23  the  partici])ant;  and 

24  (II)  may  be  limited  by  the  partic- 

25  ipant  for  i)urposes  of  entering  infor- 
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1  matioii  into  such  record,  retritnino-  iii- 

2  forniatioii  from  such  record,  oi"  both. 

3  (ii)  Identification  op  ENTm^  tiiat 

4  ENTERS  INF()RI\L\TI0N. — Ai\y  information 

5  tliat  is  added  by  an  authorized  EHR  data 

6  user  to  the  heahh  record  shall  be  identified 

7  and  disclosed  A\ithin  such  recoi'd  as  being 

8  made  by  such  user. 

9  (iii)  Satisfaction  of  iiip.\.v  privacy 

10  RE(}lilii\Ti()NS. — In  the  case  of  a  record  of 

11  a  covered  entity  (as  defined  for  jnnposes  of 

12  HIPAA  privacy  regidations),  with  respect 

13  to  an  indi\idual,  if  such  indi\idual  is  an 

14  IHRT   ])articipant  with   an  independent 

15  health  record  tnist  and  such  covered  entity 

16  is  an  authorized  EHR  data  user,  the  re- 

17  quirement  under  the  HIPiVA  pi-ivacy  regu- 

18  lations   for   such   entity  to   ])roAide  the 

19  record  to  the  ])articipant  shall  be  deemed 

20  met  if  such  entity,  ^^^thout  charge  to  the 

21  IHRT  or  the  particii^ant— 

22  (I)  fonvards  to  the  trust  an  aj)- 

23  })roi:»riately  formatted  electronic  cojiy 

24  of  the  record  (and  updates  to  such 

25  records)  for  inclusion  in  the  electronic 
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1  health  record  of  the  participant  niaiii- 

2  taiiied  hy  the  trust; 

3  (II)  enters  sucli  record  into  the 

4  electronic  health  record  of  the  i)artici- 

5  pant  so  maintained;  or 

6  (III)     otheiwise     makes  such 

7  record  available  for  electronic  access 

8  by  the  IIIRT  or  the  indi\idual  in  a 

9  manner  that  permits  such  record  to 

10  be  included  in  the  account  of  the  indi- 

1 1  vidual  contained  in  the  IHRT. 

12  (iv)  Notification  of  sensitu'e  in- 

13  FOKRLVTION. — Any  information,  vnth  re- 

14  spect  to  the  ]uirtici])ant,  that  is  sensitive 

15  information,  as  specified  by  the  Federal 

16  Trade  Commission,  shall  not  be  forwarded 

17  or  entered  by  an  authorized  EHR  data 

18  user  into  the  electronic  health  record  of  the 

19  participant  maintained  by  the  trust  unless 

20  the  user  certifies  that  the  participant  has 

21  been  notified  of  such  information. 

22  (C)  Deemed  authorization  for  access 

23  for  emeikjency  health  (^are. — 

24  (i)  FiNi)lN(}s. — Congress  finds  that — 
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1  (I)  given  the  size  and  nature  of 

2  visits  to  emergency  dei)artnients  in 

3  the  United  States,  readily  available 

4  health  intbnnation  could  make  the  dif- 

5  ference  bet^veen  life  and  death;  and 

6  (II)  because  of  the  case  mix  and 

7  volume  of  patients  treated,  emergency 

8  de])artments  are  well  j^ositioned  to 

9  pro\ide  information  for  public  health 

10  sur\^eillance,  community  risk  assess- 

11  ment,   research,  education,  training, 

12  quality  improvement,  and  other  uses. 

13  (ii)  Use  of  information. — W\th  re- 

14  spect  to  the  electronic  health  record  of  an 

15  IHRT  participant  (or  specified  parts  of 

16  such  electronic  health  record)  maintained 

17  by  an  IHRT,  the  i)artici])ant  shall  be 

18  deemed  as  pnniding  authorization  (in  the 

19  form  of  affirmative  consent)  for  health 

20  care  pro^^ders  to  access,  in  connection  with 

21  providing  emergency  care  sendees  to  the 

22  particii)ant,  a  limited,  authenticated  infor- 

23  mation  set  concerning  the  ])articii)ant  for 

24  emergency  response  purposes,  unless  the 

25  })articipant  specifies  that  such  information 
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1  set  (or  any  ])ortioii  of  such  information 

2  set)  may  not  be  so  accessed.  Such  limited 

3  information  set  may  include  information — 

4  (I)  jjatient  identification  data,  as 

5  determined  api)roi)i'iate  by  the  jjartici- 

6  pant; 

7  (II)  pro\ider  identification  that 

8  includes  the  use  of  unique  pro\dder 

9  identifiers; 

10  (III)  pa\Tnent  information; 

11  (IV)  information  related  to  the 

12  individual's  \itals,  allero-ies,  and  medi- 

13  cation  histoiy; 

14  (V)  information  related  to  exist- 

15  ing-  chronic  i)i-oblems  and  active  clin- 

16  ical  conditions  of  the  participant;  and 

17  (VI)      information  concerning 

18  physical  examinations,  procedures,  re- 

19  suits,  and  diagnosis  data. 

20  (3)  Rules  for  secondary  uses  of  records 

21  FOR  research  and  other  purposes. — 

22  (A)  In  (iENEii^VL. — ^^'\th  respect  to  the 

23  electronic  health  record  of  an  IIIRT  participant 

24  (or  specified  parts  of  such  electronic  health 

25  record)  maintained  by  an  IIIRT,  the  IHRT 


•HR  7038  ffl 


28 

1  may  sell  such  record  (or  sj^ecified  parts  of  such 

2  record)  only  if — 

3  (i)  the  transfer  is  authorized  by  the 

4  participant  })ursuant  to  an  agi-eement  be- 

5  tween  the  ])articii)ant  and  the  IHRT  and  is 

6  in  accordance  with  the  jjrivacy  protection 

7  agreement  described  in  subsection  (b)(1) 

8  entered  into  between  such  participant  and 

9  such  IHRT; 

10  (ii)  such  agreement  includes  jiaram- 

11  eters  with  respect  to  the  disclosure  of  in- 

12  formation  involved  and  a  process  for  the 

13  authorization  of  the  fiu^ther  disclosure  of 

14  information  in  such  record; 

15  (in)  the  information  involved  is  to  be 

16  used  for  research  or  other  acti\ities  only  as 

17  pro\ided  for  in  the  agi-eement; 

18  (iv)  the  recipient  of  the  information 

19  pro\'ides  assurances  that  the  information 

20  will  not  be  further  transferred  or  reused  in 

21  violation  of  such  agreement;  and 

22  (v)  the  transfer  othenvise  meets  the 

23  requirements  and  standards  i)rescribed  by 

24  the  Federal  Trade  Conunission. 
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1  (B)  Treatment  of  public  health  re- 

2  P()RTIN(J. — Nothing-  in  tliis  jiaragra])!!  shall  be 

3  constraed  as  prohibiting-  or  hmiting  the  use  of 

4  health  care  information  of  an  in(li\i(hial,  inelud- 

5  ing:  an  individual  who  is  an  IHRT  participant, 

6  for  public  health  reporting  (or  other  research) 

7  ]mr])oses  prior  to  the  inclusion  of  such  informa- 

8  tion  in  an  electronic  health  record  maintained 

9  by  an  IHRT. 

10  (4)    Law    enforcement    clarification. — 

11  Nothing  in  this  title  shall  ]irevent  an  IHRT  from 

12  discloshig  information  contained  in  an  electronic 

13  liealth  record  maintained  by  the  IIIRT  when  re- 

14  quired  for  ])urposes  of  a  lawful  investigation  or  offi- 

15  cial  jM-oceeding  inquiring  into  a  \nolation  of,  or  fail- 

16  ure  to  eomj^ly  with,  any  criminal  or  ci\il  statute  or 

17  any  reg^ulation,  rule,  or  order  issued  pursuant  to 

18  such  a  statute. 

19  (5)  Rule  of  (construction. — Nothing  in  this 

20  section  shall  l)e  construed  to  require  a  health  care 

21  pro^^der  that  does  not  utilize  electronic  methods  or 

22  api)ro])riate  levels  of  health  information  technology 

23  on  the  date  of  the  enactment  of  this  Act  to  ado])t 

24  such  electronic  methods  or  technologA^  as  a  require- 

25  ment  for  participation  or  com])liance  under  this  title. 
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1  (b)  Prr^acy  Protection  Agreement;  Treatment 

2  OF  State  Prwacy  and  Security  Laws. — 

3  (1)  Privacy  protection  ac^reement. — pri- 

4  vacy  iiroteetion  agTeement  described  in  this  sub- 

5  section  is  an  a^eement,  A\nth  res])eet  to  an  electronic 

6  health  record  of  an  IIIKT  ])artieii)ant  to  be  main- 

7  tained  by  an  independent  health  record  trast,  be- 

8  t\\'een  the  particij^ant  and  the  tnist — 

9  (A)  that  is  consistent  with  the  standards 

10  described  in  subsection  (a)(2); 

11  (B)  under  which  the  ])artici])ant  specifies 

12  the  portions  of  the  record  that  may  be  accessed, 

13  under  what  circumstances  such  portions  may  be 

14  accessed,  any  authoi-izations  for  indicated  au- 

15  thorized  EHR  data  usei's  to  access  information 

16  contained  in  the  record,  and  the  puri)oses  for 

17  which  the  information  (or  i)ortions  of  the  infor- 

18  mation)  in  the  record  may  be  used; 

19  (C)  which  pro\ides  a  process  for  the  au- 

20  thorization  of  the  transfer  of  information  con- 

21  tained  in  the  record  to  a  third  party,  including 

22  for  the  sale  of  such  information  for  purposes  of 

23  research,  by  an  authorized  EHR  data  user  and 

24  reuse  of  such  information  by  such  third  jiarty, 

25  including'  a  pro^^sion  requiring  that  such  trans- 
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1  fer  and  reuse  is  not  in  ^^olation  of  any  ])rivacy 

2  or  transfer  restrictions  placed  by  the  ])artici- 

3  pant  on  the  inde])endent  health  record  of  such 

4  particii)ant;  and 

5  (D)  under  which  the  trust  provides  assur- 

6  anees  that  the  trust  will  not  transfer,  disclose, 

7  or  pro\ide  access  to  the  record  (or  any  portion 

8  of  the  record)  in  \iolation  of  the  parameters  es- 

9  tablished  in  the  agreement  or  to  any  person  or 

10  entity  who  has  not  agTeed  to  use  and  transfer 

11  such  record  (or  ])ortion  of  such  record)  in  ac- 

12  eordance  with  such  agreement. 

13  (2)  Treatment  of  state  laws. — 

14  (A)   In   (iENEiML. — Excei)t   as  i)ro\ided 

15  under  sul)paragrai)h  (B),  the  provisions  of  a 

16  privacy  protection  agreement  entered  into  be- 

17  tween  an  IHRT  and  an  IIIRT  participant  shall 

18  preempt  any  provision  of  State  law  (or  any 

19  State  regulation)  relating-  to  the  privacy  and 

20  confidentiality  of  hidi\idually  identifiable  health 

21  information  or  to  the  security  of  such  health  in- 

22  formation. 

23  (B)  Ext'EPTION  FOR  PRIVILEGED  INPOR- 

24  ]\L\.TI()N. — The  i)ro\isions  of  a  privacy  protec- 

25  tion  ag^i-eement  shall  not  preemjit  any  provision 
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1  of  State  law  (or  any  State  rep^iilation)  that  ree- 

2  ogiiizes  privileged  coniiiiuiiicatioiis  between  phy- 

3  sieians,  health  care  i)ractitioiiers,  and  patients 

4  of  such  physicians  or  health  care  practitioners, 

5  respectively. 

6  (C)  State  defined. — Foi-  purposes  of 

7  this  section,  the  term  "State"  has  the  meaning 

8  given  such  term  when  used  in  title  XI  of  the 

9  Social  Security  Act,  as  iinmded  under  section 

10  1101(a)  of  such  Act  (42  U.S.C.  1301(a)). 

1 1  SEC.  507.  VOLUNTARY  NATURE  OF  TRUST  PARTICIPATION 

12  AND  INFORMATION  SHARING. 

13  (a)  In  Genei^aL. — Particijiation  in  an  indei)endent 


14  health  record  trust,  or  authorizing  access  to  information 

15  fi'om  such  a  trust,  is  voluntary.  No  employer,  health  insur- 

16  ance  issuer,  gi'oup  health  plan,  health  care  ])ro^^der,  or 

17  otlier  person  may  require,  as  a  condition  of  employment, 

18  issuance  of  a  health  insui*anee  policy,  coverage  under  a 

19  group  health  plan,  tlie  i)ro\ision  of  health  care  sendees, 

20  i)aAnnent  for  such  sendees,  or  othen\dse,  that  an  indi^^dual 

21  i)articipate  in,  or  authorize  access  to  information  from,  an 

22  indejjendent  health  record  trust. 

23  (b)  Enpx)RCEMENT. — The  penalties  provided  for  in 

24  subsection  (a)  of  section  1177  of  the  Social  Security  Act 

25  (42  U.S.C.  1320d-6)  shall  apply  to  a  \aolation  of  sub- 
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1  section  (a)  in  tlie  same  manner  as  sueh  ])enalties  ai)i)ly 

2  to  a  person  in  \i()lati()n  of*  subsection  (a)  of  such  section. 

3  SEC.  508.  FINANCING  OF  ACTIVITIES. 

4  (a)  In  General. — Except  as  pixnided  in  subsection 

5  (b),  an  IURT  may  generate  revenue  to  pay  for  the  oper- 

6  ations  of  tlie  IIIRT  through— 

7  (1)  charging  IIIRT  particijiants  account  fees 

8  for  use  of  the  trust; 

9  (2)  cliarging  autliorized  EIIR  data  users  for  ac- 

10  eessing  electronic  health  records  maintained  in  the 

1 1  trust; 

12  (3)  the  sale  of  information  contained  in  the 

13  trust  (as  ])ro\nded  for  in  section  506(a)(3)(A));  and 

14  (4)  any  other  acti'snty  determined  ai)i)ro])riate 

15  by  the  Federal  Trade  Conunission. 

16  (b)   Proiiibition  Against  Acx'ess  Fees  for 

17  HEAJ/rii  Cmie  Providers. — For  purjjoses  of  pro\iding 

18  incentives  to  health  care  pro^^ders  to  access  information 

19  maintained  hi  an  IIIRT,  as  authorized  by  the  IHRT  par- 

20  ticijiants  involved,  the  IIIRT  may  not  charge  a  fee  for 

21  semces  specified  by  the  IIIRT.  Such  senices  shall  include 

22  the  transmittal  of  information  from  a  health  care  pro^^der 

23  to  be  included  in  an  indej^endent  electronic  health  record 

24  maintained  by  the  IHRT  (or  i)ermitting  such  pro\i(ler  to 

25  input  sucli  information  into  the  record),  including  the 
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1  transmission  of  or  access  to  information  described  in  sec- 

2  tion  506(a)(2)(C)(ii)  by  appropriate  emergency  respond- 

3  ers. 

4  (c)  Required  Disclosures. — The  sources  and 

5  amounts  of  revenue  derived  under  subsection  (a)  for  the 

6  oi)erations  of  an  IHRT  shall  be  fully  disclosed  to  each 

7  IHRT  participant  of  such  IIIRT  and  to  the  public. 

8  (d)  Treatment  of  Income. — For  puri)oses  of  the 

9  Internal  Revenue  Code  of  1986,  any  revenue  described  in 

10  subsection  (a)  shall  not  be  included  in  gToss  income  of  any 

1 1  IHRT,  IIIRT  pai-ticipant,  or  authorized  EHR  data  user. 

1 2  SEC.  509.  REGULATORY  OVERSIGHT, 

13  (a)  In  Geneiim.. — In  earning  out  this  title,  the  Fed- 

14  eral  Trade  Commission  shall  pronuilgate  regidations  for 

15  independent  health  record  ti*usts. 

16  (b)   EST.M^LISHMENT   OF   INTERACxENCY  STEERING 

17  Committee. — 

18  (1)  In  (JENERAL. — The  Secretaiy  of  Health  and 

19  Human   Sendees   shall   establish   an  Interagency 

20  Steering  Committee  in  accordance  with  this  sub- 

21  section. 

22  (2)  Cilmrperson. — The  Seci-etary  of  Health 

23  and  Human  Sendees  shall  sen^e  as  the  chairperson 

24  of  the  Interagency  Steering  Committee. 
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1  (3)  Membeksiiip. — The  members  of  the  Iiiter- 

2  agency  Steering  Committee  shall  consist  of  the  At- 

3  torney  General,  the  Chaiiperson  of  the  Federal 

4  Trade  Commission,  the  Chairperson  for  the  National 

5  Committee  for  Vital  and  Health  Statistics,  a  rep- 

6  resentative  of  the  Federal  Reserve,  and  other  Fed- 

7  eral  officials  determined  ap])ropriate  by  the  Sec- 

8  retaiy  of  Health  and  Hnman  Semces. 

9  (4)  Duties.- — The  Interagency  Steering  Com- 

10  mittee  shall  coordinate  the  imi)lementation  of  this 

11  title,  inclnding  the  im])lementati()n  of  jiolicies  de- 

12  scribed   in   subsection    (d)   based   upon   the  rec- 

13  ommendations  ])i'o\ided  under  such  subsection,  and 

14  regulations  ])romulgated  under  this  title. 

15  (c)  Federal  Admsory  Committee.— 

16  (1)  In  GENER.\l. — The  National  Committee  for 

17  Vital  and  Health  Statistics  shall  serve  as  an  ad\isoiy 

18  committee  for  the  IHRTs.  The  membership  of  such 

19  ad\dsoiy  committee  shall  include  a  representative 

20  from  the  Federal  Trade  Connnission  and  the  chair- 

21  person  of  the  Interagency  Steering  Committee.  Not 

22  less  than  60  ]:»ercent  of  such  membership  shall  con- 

23  sist  of  representatives  of  nongovernment  entities,  at 

24  lea.st  one  of  whom  shall  be  a  re])resentative  fi'om  an 

25  organization  representing  health  care  consumers. 

•HR  7038  IH 


36 

1  (2)    Duties. — The   National   Committee  for 

2  Vital  and  Health  Statistics  shall  issue  periodic  re- 

3  ports  and  review  policies  concerning  IHRTs  based 

4  on  each  of  the  follo^^dng■  factors: 

5  (A)  Privacy  and  security  policies. 

6  (B)  Economic  ])rogi'ess. 

7  (C)  Interoperability  standards. 

8  (d)  Policies  Recommended  by  FEDERiVL  Til\I)e 

9  Commission. — The  Federal  Trade  Commission,  hi  con- 

10  saltation  with  the  National  Committee  for  Vital  and 

1 1  Health  Statistics,  shall  recommend  policies  to — 

12  (1)  pro^^de  assistance  to  encourage  the  gTOA\i:h 

13  of  independent  health  record  trusts; 

14  (2)  track  economic  jjrogress  as  it  ])ertains  to 

15  o])erators  of  independent  health  records  trasts  and 

16  indi^^duals  receiving  nontaxable  income  with  respect 

17  to  accounts; 

18  (3)  conduct  public  education  activities  regarding 

19  the  creation  and  usage  of  the  independent  health 

20  records  trusts; 

21  (4)  estal)lish  standards  for  the  interoperability 

22  of  health  information  technolog^^  to  ensure  that  in- 

23  formation  contained  hi  such  record  may  be  shared 

24  bet^veen  the  trust  involved,  the  i)articipant,  and  au- 

25  thorized  EHR  data  users,  inclu(hng  for  the  stand- 
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1  ardized  collection  and  transniissioii  of  illdi^^dual 

2  health  records  (or  portions  of  such  records)  to  au- 

3  tliorized  EHR  data  users  throuj2,h  a  common  iiiter- 

4  face  and  for  the  jiortability  of  such  records  among 

5  independent  health  record  trasts;  and 

6  (5)  cany  out  any  other  acti\ities  determined 

7  a])])ropriate  by  the  Federal  Trade  Conmiission. 

8  (e)     REGUI^TIONS    PROMITLGATED    by  FeI)E11<\Ij 

9  TiLVDE  Commission. — The  Federal  Trade  Commission 

10  shall  pronuilgate  regulations  based  on,  at  a  minimum,  the 

1 1  follo\\ing  factors: 

12  (1)  Requiring  that  an  IHRT  particijiant,  who 

13  has  an  electronic  health  record  that  is  maintained  by 

14  an  IIIRT,  be  notified  of  a  security  breech  with  re- 

15  s])ect  to  such  record,  and  any  corrective  action  taken 

16  on  behalf  of  the  participant. 

17  (2)  Requiring  that  information  sent  to,  or  re- 

18  ceived  fi-om,  an  IHRT  that  has  been  designated  as 

19  high-risk  should  be  authenticated  through  the  use  of 

20  methods  such  as  the  periodic  changing  of  passwords, 

21  the  use  of  biometrics,  the  use  of  tokens  or  other 

22  technology  as  determined  ap])roi)riate  by  the  council. 

23  (3)  Requhing  a  delay  in  releasing  sensitive 

24  health  care  test  results  and  othei-  similar  informa- 
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1  tion  to  i)atieiits  directly  in  order  to  "ive  physicians 

2  time  to  contact  the  patient. 

3  (4)    Recommendations   for   entities  operating 

4  IHRTs,  inclu(hng-  i-eqniring  analysis  of  the  potential 

5  risk  of  health  transaction  security  breeches  based  on 

6  set  criteria. 

7  (5)  The  conduct  of  audits  of  IHRTs  to  ensure 

8  that  they  are  in  compliance  with  the  requirements 

9  and  standards  established  under  this  title. 

10  (6)  Disclosure  to  IHRT  participants  of  the 

11  means  by  which  such  trusts  are  financed,  hicluding 

12  revenue  fi'om  the  sale  of  patient  data. 

13  (7)  Prevention  of  certification  of  an  entity  seek- 

14  ing  independent   heath   record   trust  certification 

15  based  on — 

16  (A)  the  potential  for  conflicts  between  the 

17  interests  of  such  entity  and  the  security  of  the 

18  health  information  involved;  and 

19  (B)  the  involvement  of  the  entity  in  any 

20  acti\ity  that  is  contraiy  to  the  best  interests  of 

21  a  patient. 

22  (8)  Prevention  of  the  use  of  revenue  sources 

23  that  are  contraiy  to  a  patient's  interests. 
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1  (9)  Public  disclosure  of  audits  in  a  luauuer 

2  similar  to  f'iuaucial  audits  i-equired  for  })ublicly  trad- 

3  ed  stock  compauies. 

4  (10)  Requiring-  notificatiou  to  a  i)artici])atiug 

5  entity  that  the  inforniatiou  contained  in  such  record 

6  may  not  be  representative  of  the  complete  or  accu- 

7  rate  electronic  health  record  of  such  account  holder. 

8  (f)  CoiMPLiANC^E  Report. — Not  later  than  1  year 

9  after  the  date  of  the  enactment  of  this  Act,  and  annually 

10  thereafter,  the  Commission  shall  submit  to  the  Committee 

11  on  Health,  Education,  Labor,  and  Pensions  and  the  Com- 

12  mittee  on  Finance  of  the  Senate  and  the  Connnittee  on 

13  Energy  and  Commerce  and  the  Connnittee  on  Ways  and 

14  Means  of  the  House  of  Rei)resentatives,  a  rej^ort  on  com- 

15  plianee  by  and  i)rogress  of  independent  health  record 

16  trusts  with  this  title.  Such  rei)()rt  shall  describe  the  fol- 

17  lowing: 

18  (1)  The  numbei'  of  complaints  submitted  about 

19  inde])endent  health  record  trusts,  which  shall  be  di- 

20  vided  by  complahits  related  to  security'  breaches,  and 

21  eomi)laints  not  related  to  security  breaches,  and  may 

22  include  other  categories  as  the  Interagency  Steering 

23  Committee  established  under  subsection  (b)  deter- 

24  mines  apiirojiriate. 
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1  (2)  The  number  of  enforcement  actions  iinder- 

2  taken  by  the  Conmiission  against  hide])endent  health 

3  record  tnists  in  T-es])onse  to  comjilaints  inider  para- 

4  graph  (1),  which  shall  be  diwled  by  enforcement  ac- 

5  tions  related  to  security  breaches  and  enfoi'cement 

6  actions  not  related  to  security  breaches  and  ma}^  in- 

7  elude  other  categories  as  the  Interagency  Steering 

8  Committee  established  under  subsection  (b)  deter- 

9  mines  a])]iroi)]-iate. 

10  (3)  The  economic  ])rogTess  of  tlie  individual 

11  o\Mier  or  institution  oi)erator  as  achieved  through 

12  inde])endent  health  record  tnist  usage  and  existing 

13  barriers  to  such  usage. 

14  (4)  The  progress  in  security  auditing  as  ])ro- 

15  \dded  for  by  the  Interagency  Steering  Committee 

16  council  under  subsection  (b). 

17  (5)  The  other  core  res])onsibilities  of  the  Com- 

18  mission  as  described  hi  subsection  (a). 

19  (g)    Inteiu(}ency    Memoilvndum    of  Under- 

20  STANDI N( J. — The  Interagency  Steering  Committee  shall 

21  ensure,  through  the  execution  of  an  interagency  memo- 

22  randum  of  understanding,  that — 

23  (1)    regulations,   rulings,   and  inter])retations 

24  issued  by  Federal  officials  relating  to  the  same  mat- 

25  ter  over  which  2  or  more  such  officials  have  respon- 
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1  sibility  under  this  title  are  administei-ed  so  as  to 

2  have  the  same  effect  at  all  times;  and 

3  (2)  the  memorandum  pro\ides  for  the  eoordina- 

4  tion  of  policies  related  to  enforcing'  the  same  i-e(iuire- 

5  ments  through  such  officials  in  order  to  have  coordi- 

6  nated  enforcement  strategy  that  avoids  duplication 

7  of  enforcement  efforts  and  assigns  ])riorities  in  en- 

8  foreement. 

O 
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